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Abstract 



We report a free-space entanglement-based quantum key distribution experiment, implementing 
the efficient BB84 protocol between two sites which are 15.3 km apart. Photon pairs from a 



polarization-entangled source are distributed through two 8-km free-space optical links. An optimal 



bias 20:80 between the X and Z basis is used. A post-processing scheme with finite-key analysis is 

applied to extract the final secure key. After three-hour continuous operation at night, a 4146-bit 

\& . secure key is obtained, with a final key rate of 0.123 bit per raw key bit. Our results experimentally 

demonstrate the efficient BB84 protocol which is potentially useful for the ground-satellite quantum 

m 

communication. 
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I. INTRODUCTION 

Quantum key distribution (QKD) offers an approach of information-theoretically secure 
key extension between two remote parties, Alice and Bob, based on the fundamental princi- 
ples of quantum mechanics. There are two types of QKD schemes: one is the prepare-and- 
measure scheme, such as the Bennett-Brassard- 1984 (BB84) protocol [l|; the other is the 
entanglement-based scheme, such as the Ekert-1991 protocol |2j and the Bennett-Brassard- 
Mermin-1992 (BBM92) protocol [3|. Since the first QKD experimental demonstration in the 
early 1990s [4J, QKD has rapidly developed towards the stage for real-life applications [5|. 

Generally speaking, there are mainly two types of quantum channels, fiber links and free- 
space links. Considering absorptive channel losses and detector dark counts, the distances 
of current fiber-based QKD experiments are limited to hundreds of kilometers p, |7| . For 
free-space links, on the other hand, the photon losses and photon decoherence are almost 
negligible in outer space, thus the ground-satellite QKD offers a promising way to run large- 
scale quantum communication schemes 8] . Along this line, the free-space QKD systems have 
been successfully demonstrated over large scale distances [9Hl2j, with high key rates 13Nl6| 



and even on daylight [17|. Recently, a series of experimental demonstrations are presented 



or 



20 



easibility tests of ground-satellite quantum communication 18 



2l|. 



191 ] and teleportation 



In the BB84 protocol, Alice prepares qubits in the X or Z basis randomly and sends 
them to Bob, who measures randomly in one of the two bases. In the original proposal, 
Alice and Bob both choose two bases with equal probabilities (50:50). Thus, in the basis-sift 
procedure, they have to discard half of the detection events (i.e., the basis-sift factor is 1/2). 
Later, Lo, Chau and Ardehali proposed an efficient version of the BB84 protocol |22|, in 
which Alice and Bob choose two bases, the X and the Z, unevenly (with a bias) to increase 
the basis-sift factor. In the infinite-key-size limit, this efficient BB84 protocol can improve 
the basis-sift factor from 1/2 to 1, comparing to the original BB84. The efficient BB84 
protocol can be naturally extended to its entanglement-based version, the BBM92 protocol 
3|- 

The first local experimental demonstration of the efficient BB84 in laboratory is presented 
in 2009 [23j, where the bias is simulated by introducing extra losses in one of the bases. In 
practice, such kind of biased setup cannot increase the QKD efficiency In our experiment, 



the efficient BB84 protocol is demonstrated by actively changing the ratio of two bases, 
which can increase the final key rate by 14% comparing to the standard BB84 case. 

In this paper, we report a free-space entanglement-based QKD experiment using a para- 
metric down-conversion (PDC) source. The distances between the PDC source and two re- 
ceivers are both above 8 km which is comparable to the effective thickness of the atmosphere. 

| ] 

Furthermore, the efficient BB84 protocol [22] is implemented in our QKD experiment. In 

the evaluation of the final secure key, we apply a post-processing scheme with finite-key 



analysis |24j, |25] 



In Section [TTJ we describe the experiment setup and implementation details. In Section 
IHIt we present the data postprocessing with finite-key analysis. We finally conclude in 
Section [TV] with discussions. 

II. EXPERIMENTAL IMPLEMENTATION 

We establish two free-space optical links among three sites, two receiver stations on two 
sides and one transmitter in the middle, near Qinghai Lake in China. The main purpose 
of this experiment is to implement a free-space entanglement-based QKD with the efficient 
BB84 scheme. 

A. Experimental setup 

At the transmitter, sited in the lawn of a local family near Qinghai Lake, the core equip- 
ment is a compact entanglement source (45 x 30 cm 2 ) which utilizes a periodically poled 
KTiOPOi (ppKTP) crystal in a polarization-based Sagnac interferometer. By a pump laser 
of 12 mW, the PDC source can generate around 10 7 entangled pairs per second with a cen- 
tral wavelength of 811 nm. In a 3 ns coincidence time window, about 5 x 10 5 photon pairs 
per second is detected locally with long-pass filters (with cutoff wavelengths at 488 nm). 
The full width at half maximum (FWHM) of the generated photon pairs is about 0.2 nm. 
Two commercial Kepler telescopes with 80 mm diameter was used to transmit the entangled 
photon pairs to two receiver cites, respectively. 

The two receiver cites, 15.3 km apart, are located 8 km away from the transmitter, as 
shown in Fig. [TJ At Alice's receiver, settled in an observation platform of a hillside, we use 



a commercial 127-mm-diameter telescope to collect the entangled photons flying from the 
PDC source. At Bob's receiver, we use an off-axis parabolic telescope with a diameter of 
400 mm. The collected photons are coupled into 105-/im-diameter multimode fibers with 
0.22 numerical apertures, and then detected by two avalanche photodiode (APD) single- 
photon detectors. A 3 nm narrow-band filter is used in front of each collimator to reduce 
the background noise. We separate the synchronization light (1064 nm) from the entangled 
photons (811 nm) via the dichroic mirror (DM) at both receivers. In addition, we utilize 
wireless bridge to exchange classical information between Alice and Bob. 
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FIG. 1. A schematic diagram of the entanglement-based QKD setup. At the transmitter, a 
Sagnac PDC source generates entangled photon pairs. Two 80-mm-diameter telescopes are used 
to transmit photon pairs to two receiver sites, 8 km away from the transmitter each. The detector 
modules, employed in both receivers, consist of a Pockels Cell (PoC), a polarization beam splitter 
cube (PBS) with two collimators placed in the transmitted and the reflected output port of PBS. 



In both receivers, Pockels Cells (PoCs), composed of potassium dideuterium phosphate 
(KD*P) crystals, are used to actively choosing polarization measurement bases. In order to 
make the PoC work as a switchable half-wave plate (HWP) for the basis choice (X or Z 
basis), we align the optical axis of PoC to 22.5° in front of a polarizing beam splitter (PBS). 



B. Basis bias setting 



On the receiver end, as shown in Fig. [TJ we use a PoC to actively choose the measurement 
basis. The tailored logic modules (LM) contains an id Quantique quantum random number 
generater (QRNG), a complex programmable logic device (CPLD) chip and a single-chip 
microcomputer. The QRNG, with a maximum generation rate of 4 MHz, controls a PoC 
to actively choose polarization measurement basis. The advantage of using active basis 
choice is that we can set an arbitrary basis bias flexibly. For the passive method, on the 
other hand, we need a specialized biased beam splitter, whose bias is normally fixed, for the 
efficient BB84 protocol. 

The Fig. [2] illustrates the workflow of LM. The first function of LM is choosing a basis 
bias. We load a 10-bit random number from the QRNG into buffer memory of our LM, 
denoted by N r , and compare it to reference number, N . If N r > N , LM outputs logic "1", 
and else outputs logic "0" . Then the expected probability of outputting random number 



1" is 



Prob(cik 



N x2 



-10 



Now we can control the sifting factor q through changing the number iVo- The controlling 
accuracy depends on the number of random bits to generate N . 
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FIG. 2. A Logic Module is applied for controlling the Pockels Cells, switching polarization bases 
and outputting measurement results. Commercial QRNGs are applied to choosing measurement 
basis. The logical operation and the human-computer interface are realized via a CPLD (Complex 
programmable logic device) chip and a Single-Chip Microcomputer. 



The second function of LM is to distinguish the detected photons between four polar- 
ization states. The LM outputs a low-voltage modulation signal into a high-voltage pulser 
(HV1000) to switch the PoCs between half-wave voltage (about +6001/) and biased voltage 
(about +1001/). Part of the low- voltage modulation signal, which contains the basis informa- 
tion, and the output signal from APDs, which contains the bit information, are processed into 
one of the four states {00, 01, 10, 11}, representing the quantum states {\H), \V), |+), |— )}, 
respectively. The final result is recoded in a time-to-digital converter (TDC), as shown in 
Fig.H 

C. Synchronization 

In order to achieve a high signal-to-noise ratio, we need a narrow coincidence time window 
to reduce the background count rate. We use a high-accuracy TDC to record the arrival 
time of the entangled photons at both receivers. For coarse synchronization, we employ the 



glo 



m 



m 



position system (GPS). Then, we mainly follow the fine synchronization method used 
121 ]. Finally, we observe a coincidence peak with a FWHM around 1 ns. Coincidence 



time window of 2.5 ns is used in the postprocessing of this experiment (see Fig. [3]). 
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FIG. 3. The coincident detection events between Alice and Bob in a 25-min continuous sampling 
test. After balancing between the number of coincident events and the source visibility, we set the 
time gate to be 2.5 ns in our experiment. 



III. POSTPROCESSING AND RESULT 

The experiment lasts for nearly 3 hours at nighttime, with 10206 seconds of effective 
QKD time. During the process, the average channel loss is around 46.5 dB, including 26.9 
dB loss of Alice's optical link and 19.6 dB of Bob's. By considering the balance between the 
signal-to-noise ratio and the raw key size, we set the coinciding time-gate to be 2.5 ns. The 
results of the postprocessing are shown in Tab. [H 

TABLE I. List of measurement and post-processing results. After taking into account of authenti- 
cation, error correction and privacy amplification, we evaluate the final secure key length. The n x 
and n z are the sifted key length in X and Z basis, respectively. The error correction efficiencies, f e b x 
and f e b z , are evaluated by considering the low-density parity-check (LDPC) codes and progressive 



261 ]. The failure probability e in phase error rate estimation pro- 



edge-growth (PEG) algorithm 

cessing is defined in Ref . [24] . Improvement shows the increment of final key rate over the unbiased 

BB84 protocol. 
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0.069 
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0.79 


4145 


14% 



In the calculation of the final secure key length, we employ the post-processing method 



proposed in Ref. |24j, taking into account of the finite-key size effect. The result is listed in 
Table HI We use a bias of 20 : 80 (X : Z), which is close to the theoretical optimal value of 
21 : 79. In the asymptotic case, where the finite-key effect is neglected, the final key size 



should achieve an 36% increase over the unbiased case 27]]. After considering the finite-key 
effect, we obtain a final key rate of 0.123 bit /raw key. 

For comparison, we fix the raw key size to simulate the unbiased case by dividing equally 
the sifted keys into two bases and keep all the other parameters unchanged and then we 
obtain the final key rate of 0.108 bit/raw key. Hence, we increase the final key rate by 14% 
through implementing the efficient BB84 protocol. Comparing to the infinite-key improve- 



ment of 36%, one can see that the finite- key analysis does affect the QKD data postpro- 
cessing. The reason for this gap is mainly due to the relatively small final key size (4145 
bits in our experiment). Therefore, we emphasize the importance of finite- key-size analysis, 
especially in the case of a small final key size (such as < 10 5 ). This result is compatible to 
the theoretical simulations [241 ]. 

In fact, if we had obtained a longer key in our experiment (say, by extending the ex- 
perimental time or increasing the telescope aperture to reduce the channel loss), such as 1 
Mbits raw key, we could have achieved key-rate improvement of 71% (by taking a theoret- 
ical optimal 4:96 bias) over the unbiased case with the finite-key effect taken into account. 
Therefore, we conclude that the efficient BB84 protocol is an effective way to increase the 
final secrete key rate. 

IV. CONCLUSION AND DISCUSSIONS 

We have experimentally demonstrated the free-space entanglement-based QKD with the 
efficient BB84 protocol. The final key rate in our biased basis setting is increased by 14% 
comparing to the standard BB84 protocol, after considering the finite- key effect. The ex- 
perimental result suggests that the efficient BB84 protocol is indeed an easy and effective 
way to increase the key rate for QKD. 

Note that a couple of feasibility tests for ground-satellite QKD have been done recently 
[l8L Il9j ] , both of which employ the prepare-and- measure QKD protocol. Lately, another type 
of scheme, the entanglement-based QKD where an entangled source is put in a satellite and 
signals are transmitted to two ground stations via two quantum channels, attracts lots of 
research interests 28] . Considering that the lengths of our two free-space optical links are 
comparable to the effective thickness of atmosphere, our experiment can be regarded as a 
simulation of the entanglement-based ground-satellite QKD. 

In our setup, the basis bias can be randomly modified in real-time. It is interesting to 
study whether one can take advantage of this extra degree of freedom of basis choice. Also, 
the basis is actively chosen in our setup, which allows us to apply four-state polarization 



analyzer 29] to foil some quantum attacks, such as the time-shift attack [30] due to the 



efficiency mismatch of detectors 31] . This can be done by adding one more PoC with 



45° aligned to the optical axis in Fig. [TJ Furthermore, the technique of actively choosing 

8 



measurement bases developed in this work can also be applied to other scientific experiments, 
such as the fundamental tests of quantum mechanics — nonlocal correlation 32] . 

In a passive basis choice setting, such as the one used in Ref. 23), there is a potential 
drawback compared to our active setting as we used here. In the passive setting, four 
detectors (two for each basis) always open regardless of basis choices. Hence, when a large 
bias is used, the effect of dark counts on the basis with a lower rate may increase. For 
example, suppose we use a bias of 10:90 for the Y/Z-basis, then the number of errors 
introduced by dark counts in Y-basis is 10 times higher than the one in the active setting. 
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